Note: A member assigned a role with the cloudnotifications.activities.list
permission is not subscribed to alerts by default, rather this permission
allows the member to subscribe to alerts from Firebase services. Also, this
permission allows the member to subscribe to alerts from any Firebase
service even if that service is not part of the member's assigned role.

Update existing database instances
Enable and disable database instances
Write access to the data in the database
Retrieve and modify security rules for the database
Retrieve and modify Cloud Functions triggers for the database

Cloud Firestore permissions

For a list and descriptions of Cloud Firestore permissions, see the
GCP documentation.

Cloud Storage for Firebase permissions

Note: These permissions control access to security rules for
Cloud Storage and Cloud Firestore. For permissions that control
access to security rules for Firebase Realtime Database, see the
Realtime Database permissions.

Cloud Functions for Firebase permissions

For a list and descriptions of Cloud Functions permissions, see the
GCP documentation.

Note that the deployment of functions requires a specific configuration of
permissions that aren't included in the standard
Firebase predefined roles.
To deploy functions, use one of the following options:

Delegate the deployment of Cloud Functions to a project member assigned a
primitive role
of Owner or Editor.

Assign a member the Firebase Develop Admin predefined role
(roles/firebase.developAdmin)
using the Firebase console. Then, using the GCP Console or GCloud, also
assign the member a service account user role (for detailed steps and
security implications for this role configuration, see the
GCP documentation).

Firebase Test Lab permissions

Test Lab requires access to Cloud Storage buckets, so it requires a
specific configuration of permissions that aren't all included in the standard
Firebase predefined roles.
To grant access to Test Lab, use one of the following options:

Test your app in a dedicated separate Firebase project.

Add members who need Test Lab access, then assign them the Editor
role using the Firebase console.

Assign a pair of predefined roles (which together grant the required set of
permissions) using the
GCP console.

To allow a member to run tests with Test Lab, assign both:

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

To allow a member to view test results in Test Lab, assign both:

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Caution: Members assigned these predefined roles can access all
Cloud Storage buckets associated with the Firebase project, potentially
including customer data.

Permission name

Description

cloudtestservice.environmentcatalog.get

Retrieve the catalog of supported test environments for a project

cloudtestservice.matrices.create

Request to run a matrix of tests according to the given specifications